
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32332d3233203d3e20313335333931.roa
File: 3132312e34362e3134302e302f32332d3233203d3e20313335333931.roa (raw, json)
Hash identifier: +l4EoXXiTz2/M9uRGX2psfvFNZc++YlzdqUSnREzJWs=
Subject key identifier: E8:A5:42:31:9F:3D:68:A5:71:64:83:EE:86:56:4F:06:3A:17:94:09
Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Certificate serial: 5508168B05CE0446BC1AE6090119A0A775F22443
Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32332d3233203d3e20313335333931.roa
Signing time: Thu 23 Apr 2026 08:09:21 +0000
ROA not before: Thu 23 Apr 2026 08:04:21 +0000
ROA not after: Thu 22 Apr 2027 08:09:21 +0000
asID: 135391
IP address blocks: 121.46.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 06:27:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:08:16:8b:05:ce:04:46:bc:1a:e6:09:01:19:a0:a7:75:f2:24:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6
Validity
Not Before: Apr 23 08:04:21 2026 GMT
Not After : Apr 22 08:09:21 2027 GMT
Subject: CN=E8A542319F3D68A5716483EE86564F063A179409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:bd:58:d5:3f:67:2e:56:7d:d7:40:34:74:
44:5c:98:0a:6a:23:74:fd:f6:26:3b:e0:67:91:cd:
77:12:c3:6c:82:ae:e6:d0:9d:1d:47:6c:39:c1:68:
6d:e0:f3:f3:a1:7e:86:67:2b:82:ff:f7:2c:e1:6a:
4e:8f:aa:49:27:49:22:74:d2:82:72:8d:b7:f0:5a:
ca:45:3c:b9:8c:06:6e:89:ce:07:34:42:54:f9:eb:
3e:b8:fa:ef:38:c9:86:ec:61:aa:40:db:55:aa:c7:
82:f4:96:86:3a:0c:02:04:fb:26:b1:37:92:e5:dc:
47:e6:27:a2:bb:81:54:58:26:03:b5:4e:a5:3b:d3:
79:17:dc:fd:20:0b:e1:82:10:eb:3f:ef:74:d2:2a:
05:f9:14:2d:b6:eb:93:92:d3:ac:7d:3e:c3:7d:c4:
6a:e7:e1:38:79:c9:6c:a1:02:bf:9b:20:9e:b6:dd:
e4:c7:25:29:88:62:7c:be:80:f7:33:4a:c6:f6:df:
d8:63:1d:94:01:dd:39:3f:33:f7:53:40:bd:54:18:
ff:42:d1:e9:c3:c1:40:4b:fc:5c:69:f1:0e:7e:f4:
98:6d:1d:3d:2b:94:33:7b:c6:b3:ae:2a:b7:ed:e2:
11:1c:67:32:f1:5b:f6:32:3c:f3:3b:0c:21:5a:fa:
53:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A5:42:31:9F:3D:68:A5:71:64:83:EE:86:56:4F:06:3A:17:94:09
X509v3 Authority Key Identifier:
keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3132312e34362e3134302e302f32332d3233203d3e20313335333931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.46.140.0/23
Signature Algorithm: sha256WithRSAEncryption
92:bd:4d:f9:86:b1:26:37:93:a3:f1:81:89:c7:8a:46:5f:9a:
e3:54:52:71:91:8c:2f:b0:65:6a:e9:69:65:b2:e9:58:80:85:
5a:90:13:b4:01:55:62:ed:2c:95:87:57:08:91:bc:20:72:e3:
ec:07:f3:0f:5d:f9:75:66:0a:8d:30:9e:cf:83:d8:7e:04:1b:
c7:0a:6a:d6:2f:d1:eb:70:6f:26:f6:06:37:e5:e4:b5:12:87:
40:a2:67:64:35:24:68:d1:98:de:b8:c1:2a:62:95:f2:2e:28:
9b:05:d6:27:b7:bf:ef:4d:6b:a7:65:42:10:fc:70:3a:d3:fd:
7a:a6:a6:50:37:fe:01:9d:7e:13:3b:e9:e5:50:b0:26:5a:cd:
18:e2:00:ae:b3:a0:9d:b7:79:66:c2:6c:97:f2:3b:42:cf:71:
fa:34:19:8b:8f:0b:81:9d:be:15:2f:3f:37:8d:33:3e:03:84:
9e:ff:b1:80:55:71:08:65:81:c1:6b:08:f1:c6:ad:d6:ed:f2:
36:7c:ca:82:cf:f2:3f:2e:28:1b:b6:d3:ac:f9:a9:14:38:18:
47:b3:39:8b:51:58:fa:e9:31:32:74:32:69:bf:4a:0f:73:aa:
70:40:11:aa:ba:cb:1f:d5:bc:59:07:8c:b1:9b:fb:57:21:c0:
18:29:3f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:00:20 2026 by rpki-client